Configuration

curl -fsSL https://tracebloc.io/i.sh | TRACEBLOC_CLUSTER_NAME=my-cluster TRACEBLOC_STORAGE_MODE=hostpath bash

# Stop — frees CPU/RAM, datasets survive
k3d cluster stop tracebloc

# Start — resume where you left off
k3d cluster start tracebloc

# Delete — removes the cluster entirely (and node-local datasets)
k3d cluster delete tracebloc

kubectl logs -n <namespace> -l app=manager

kubectl get nodes -o wide          # Node status and IPs
kubectl get pods -A                # All pods across namespaces
kubectl get pods -n <namespace>    # Pods in your secure environment
kubectl get pvc -n <namespace>     # Persistent volume claims
kubectl get services -n <namespace> # Services and endpoints

helm repo add tracebloc https://tracebloc.github.io/client
helm repo update

helm show values tracebloc/client > values.yaml

clientId: "<YOUR_CLIENT_ID>"
clientPassword: "<YOUR_CLIENT_PASSWORD>"

env:
  RESOURCE_REQUESTS: "cpu=2,memory=8Gi"   # example override
  RESOURCE_LIMITS: "cpu=2,memory=8Gi"
  GPU_REQUESTS: ""             # "nvidia.com/gpu=1" for GPU
  GPU_LIMITS: ""               # "nvidia.com/gpu=1" for GPU
  RUNTIME_CLASS_NAME: ""       # "nvidia" for k3s GPU

storageClass:
  create: true
  provisioner: ""              # set per platform (see ci/*-values.yaml)
  allowVolumeExpansion: true
  parameters: {}

# Bare-metal only — hostPath-backed PVs at /tracebloc/{data,logs,mysql}
hostPath:
  enabled: false

pvc:
  mysql: 2Gi
  logs: 10Gi
  data: 50Gi

dockerRegistry:
  create: true
  server: https://index.docker.io/v1/
  username: <DOCKER_USERNAME>
  password: <DOCKER_PASSWORD or DOCKER_TOKEN>
  email: <DOCKER_EMAIL>

env:
  HTTP_PROXY_HOST: "your-proxy.company.com"
  HTTP_PROXY_PORT: "8080"
  HTTP_PROXY_USERNAME: ""
  HTTP_PROXY_PASSWORD: ""

autoUpgrade:
  enabled: true                # set false to opt out
  schedule: "23 * * * *"       # hourly at :23
  suspend: false               # one-shot pause without removing resources
  repoUrl: "https://tracebloc.github.io/client"
  repoName: "tracebloc"
  chartName: "client"
  timeout: "10m"

networkPolicy:
  training:
    enabled: true              # the default
    allowExternalHttps: false  # the default: HTTPS only through the egress gateway
    dnsNamespace: kube-system
    dnsSelector: {}            # empty falls back to {k8s-app: kube-dns}
    clusterCidrs:
      - "10.0.0.0/8"
      - "172.16.0.0/12"
      - "192.168.0.0/16"

resourceMonitor:
  enabled: true                # set false on clusters where metrics-server cannot be installed
nodeAgents:
  namespace:
    create: true
    name: tracebloc-node-agents

kubectl create namespace tracebloc-node-agents
kubectl label namespace tracebloc-node-agents \
  pod-security.kubernetes.io/enforce=privileged \
  pod-security.kubernetes.io/warn=privileged \
  pod-security.kubernetes.io/audit=privileged

namespace:
  create: false                # true only on greenfield installs
  podSecurity:
    warn: restricted
    audit: restricted
    enforce: restricted        # set "" for bare-metal hostPath installs

kubectl label namespace <namespace> \
  pod-security.kubernetes.io/warn=restricted \
  pod-security.kubernetes.io/audit=restricted \
  pod-security.kubernetes.io/enforce=restricted

images:
  jobsManager:    { digest: "sha256:..." }
  podsMonitor:    { digest: "sha256:..." }
  resourceMonitor: { digest: "sha256:..." }
  requestsProxy:  { digest: "sha256:..." }
  mysqlClient:    { tag: "", digest: "" }
  busybox:        { tag: "1.35", digest: "" }

priorityClass:
  create: true                 # default: false
  name: tracebloc-data-plane   # default: "" (required with create: true)
  value: 1000000

podDisruptionBudget:
  mysql:       { create: null }   # null = auto, true = always, false = never
  jobsManager: { create: null }

helm upgrade --install <namespace> tracebloc/client \
  --namespace <namespace> \
  --create-namespace \
  --values values.yaml

helm repo update
helm upgrade <namespace> tracebloc/client \
  --namespace <namespace> \
  --reset-then-reuse-values \
  --values values.yaml

helm uninstall <namespace> -n <namespace>

kubectl delete pvc --all -n <namespace>
kubectl delete namespace <namespace>